CVE Feed

    Dashboard / CVE / CVE-2023-52080

    CVE-2023-52080

    IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical data in memory data is tampered with,a crash may occur.

    Published:Apr 29, 2024
    Last Modified:Apr 15, 2026
    EPS:Apr 29, 2024
    EPSS Score:0.00085
    CVSS Score:7.7

    Affected Products

    Vendor
    Ieisystem
    Product
    Uefi Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High